System Security →hardMultiple ChoiceObjective-mapped

LPIC-2 System Security Practice Question

Network Topology

A new client with IP 10.0.1.15 tries to connect to HTTPS on the server. Based on the exhibit, what happens?

⚠ Common exam trap

It's easy for candidates to assume a later DROP rule (e.g., for 10.0.1.0/24) applies, forgetting that iptables processes rules sequentially and an earlier ACCEPT rule for a larger subnet (10.0.0.0/8) will match first, bypassing the more specific drop rule.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The connection is accepted because 10.0.1.15 is in 10.0.0.0/8.

The iptables rule set includes a rule that accepts traffic from the 10.0.0.0/8 subnet. The client IP 10.0.1.15 falls within this range, so the HTTPS connection matches the rule and is accepted. This occurs before any later rules that might drop or reject the traffic.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The connection is dropped by rule 5.
Why it's wrong here
Rule 4 matches before rule 5.
✗
The connection is rejected with an ICMP error.
Why it's wrong here
DROP does not send ICMP.
✗
The connection is accepted only if state RELATED.
Why it's wrong here
State RELATED is for replies, not new connections.
✓
The connection is accepted because 10.0.1.15 is in 10.0.0.0/8.
Why this is correct
Matches rule 4, accepting HTTPS.

Visual reference

Go deeper

LPIC-2 System Security Practice Question

Why each option matters

Option-by-option breakdown

Related to this question